PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Personal Data Found on Instagram's Servers 7 Years After User Deleted Files

The social network has been caught retaining photos and private messages long after the user deleted them, which the company says is an issue it has now fixed.

 & Matthew Humphries Former Senior Editor

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS
(Photo by Carl Court/Getty Images)

When you delete personal information from one of the many popular social networks out there, you expect the data to be removed from the company's servers permanently in an appropriate timeframe. That's not been the case on Instagram, though.

As TechCrunch reports, independent security researcher Saugat Pokharel used Instagram's Download Your Information tool to see what data the social network had stored on its servers about him. He was surprised to find photographs and private messages he'd deleted more than a year earlier, and in a few cases there were photographs he'd deleted back in 2013. Instagram's policy is to remove any deleted data from its servers within 90 days, so clearly something went wrong.

Pokharel reported his discovery to Instagram and in return earned himself a $6,000 bug bounty reward. An Instagram spokesperson has since commented, "The researcher reported an issue where someone’s deleted Instagram images and messages would be included in a copy of their information if they used our Download Your Information tool on Instagram. We’ve fixed the issue and have seen no evidence of abuse. We thank the researcher for reporting this issue to us."

The year-long retention of deleted data should therefore no longer happen for Instagram accounts, but this does raise the question of other services and if their data deletion policies actually function as described. Last year, Twitter was caught storing direct messages years after users had deleted them, so this is clearly not just an Instagram problem.

Further Reading

Social Media Reviews

About Our Expert

Matthew Humphries

Matthew Humphries

Former Senior Editor

My Experience

I started working at PCMag in November 2016, covering all areas of technology and video game news. Before that I spent nearly 15 years working at Geek.com as a writer and editor. I also spent the first six years after leaving university as a professional game designer working with Disney, Games Workshop, 20th Century Fox, and Vivendi.

I hold two degrees: a Bachelor's degree in Computer Science and a Master's degree in Games Development. My first book, Make Your Own Pixel Art, is available from all good book shops.

My Areas of Expertise

  • PC components and system building
  • Raspberry Pi
  • Software development
  • Storage technology
  • Video games and gaming hardware

Read full bio